Policy configured with Application ID but sarda cloud saying I need to configure services as well ?

[din100]

Hi everyone,

I have my policies configured with the Application ID, and I’ve set the service to "any" because some applications use random ports.

However, Strata Cloud is recommending that I configure the services explicitly as well.

I was under the impression that if I configured the application in the policy, only that application would be allowed. Is that not correct?

Thanks for your input!

[Edsnow]

Hi @din100 ,

The application you are selecting in the policy will check the for the application signature, you need to configure the service explicitly as application-default or you can configure the port specifically.

[din100]

If I have the service as "any" and select the application ID for few apps. It's not securing anything ? will it allow any other app as well on a different port ?